Comments on: Three Levels of Encryption http://blog.passpack.com/2008/03/three-levels-of-encryption/ Passpack keeps your logins safe, organized and available 24/7. You can send 100% private messages to people you trust. Sat, 06 Mar 2010 15:51:23 +0000 http://wordpress.org/ hourly 1 By: David Spector http://blog.passpack.com/2008/03/three-levels-of-encryption/comment-page-1/#comment-1212 David Spector Fri, 01 Aug 2008 22:49:00 +0000 http://blog.passpack.com/?p=400#comment-1212 Here is a much simpler way to get speed for your users without requiring them to choose the encryption algorithm (this is not user-friendly because they can't really understand the tradeoffs provided by three algorithms): 1. Separate out the user's data into one piece for the index (the list of entries), and one piece for each entry. 2. Encrypt each entry (and the index) SEPARATELY using the best encryption method when the entry is edited or imported. 3. Store the encrypted index and all the encrypted entries as a single concatenated list of data. When the user looks at their entries (opens their pack), decrypt the index only. Note: if this is slow for 100-200 entries, use a less secure algorithm (it's only the index!). When the user selects an entry (to visit that URL and make automatic entries in form fields, or to edit it, etc.), decrypt ONLY that entry, then act on the decrypted data. See how simple this is? Instead of encrypting or decrypting the ENTIRE pack on load/store, you need only encrypt a single entry when necessary (this is called Lazy Evaluation in Computer Science). I hope this helps you improve your product. David Here is a much simpler way to get speed for your users without requiring them to choose the encryption algorithm (this is not user-friendly because they can’t really understand the tradeoffs provided by three algorithms):

1. Separate out the user’s data into one piece for the index (the list of entries), and one piece for each entry.

2. Encrypt each entry (and the index) SEPARATELY using the best encryption method when the entry is edited or imported.

3. Store the encrypted index and all the encrypted entries as a single concatenated list of data.

When the user looks at their entries (opens their pack), decrypt the index only. Note: if this is slow for 100-200 entries, use a less secure algorithm (it’s only the index!).

When the user selects an entry (to visit that URL and make automatic entries in form fields, or to edit it, etc.), decrypt ONLY that entry, then act on the decrypted data.

See how simple this is? Instead of encrypting or decrypting the ENTIRE pack on load/store, you need only encrypt a single entry when necessary (this is called Lazy Evaluation in Computer Science).

I hope this helps you improve your product.

David

]]> By: Beta 6 Public Preview « Passpack Blog http://blog.passpack.com/2008/03/three-levels-of-encryption/comment-page-1/#comment-1211 Beta 6 Public Preview « Passpack Blog Sat, 31 May 2008 23:17:34 +0000 http://blog.passpack.com/?p=400#comment-1211 [...] Tab The password list we all know and love but… you can now add favorites, change the encryption levels if you so please, and you’ve got your tags placed handily on the right side of the [...] [...] Tab The password list we all know and love but… you can now add favorites, change the encryption levels if you so please, and you’ve got your tags placed handily on the right side of the [...]

]]> By: Want to Test PassPack Beta 6? « PassPack Blog http://blog.passpack.com/2008/03/three-levels-of-encryption/comment-page-1/#comment-1210 Want to Test PassPack Beta 6? « PassPack Blog Sun, 04 May 2008 07:47:08 +0000 http://blog.passpack.com/?p=400#comment-1210 [...] a lot of you mentioned you’d like to see PassPack go quicker. Beta6 will give you the option of 3 levels of encryption speed and setting up favorites - so you the choice is [...] [...] a lot of you mentioned you’d like to see PassPack go quicker. Beta6 will give you the option of 3 levels of encryption speed and setting up favorites – so you the choice is [...]

]]> By: Manage Passwords Online With Passpack » Tip and Trick http://blog.passpack.com/2008/03/three-levels-of-encryption/comment-page-1/#comment-368 Manage Passwords Online With Passpack » Tip and Trick Mon, 21 Apr 2008 13:48:01 +0000 http://blog.passpack.com/?p=400#comment-368 [...] The Passpack Beta 6 enables users to choose from 3 different levels of encryption. Read out more about Beta [...] [...] The Passpack Beta 6 enables users to choose from 3 different levels of encryption. Read out more about Beta [...]

]]>